This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31322e302f32332d3233203d3e203631393631.roa File: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (raw, json) Hash identifier: K2bvJBEaQFYY47bBZ4YDCNGtZnv+jlZTA/Yza+i0hIA= Subject key identifier: FE:78:C0:F1:5C:C2:BA:6E:11:DD:EE:70:90:EA:9C:3A:70:BA:7B:93 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 2A554D882253FD96D2E93DE559F176A012C34475 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31322e302f32332d3233203d3e203631393631.roa Signing time: Mon 01 Dec 2025 08:21:33 +0000 ROA not before: Mon 01 Dec 2025 08:16:33 +0000 ROA not after: Mon 30 Nov 2026 08:21:33 +0000 asID: 61961 IP address blocks: 185.204.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:55:4d:88:22:53:fd:96:d2:e9:3d:e5:59:f1:76:a0:12:c3:44:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Dec 1 08:16:33 2025 GMT Not After : Nov 30 08:21:33 2026 GMT Subject: CN=FE78C0F15CC2BA6E11DDEE7090EA9C3A70BA7B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:7a:55:9a:54:79:ee:b2:b1:44:89:a5:66: ae:43:16:54:57:fd:82:7b:ea:cb:0a:7d:c3:c9:5e: 34:9b:05:62:35:1b:df:42:a8:db:e1:80:4d:91:e1: 34:ed:09:80:03:34:32:37:9e:05:76:e3:d5:51:50: 8f:b0:0f:90:41:ce:c4:85:96:3f:57:97:bd:37:0f: 62:82:30:f2:78:0b:f7:89:74:1b:0c:aa:5d:e5:2f: 44:27:62:ef:38:de:82:28:72:4b:c6:84:0e:dd:69: ca:02:13:69:57:09:2a:15:5e:f1:9b:af:8e:13:fd: ca:6a:ff:8a:ba:a3:0f:30:38:c1:aa:08:5f:fa:56: 92:5c:7e:88:8e:06:74:57:d8:e0:e8:62:e5:fb:28: 6c:7a:5f:18:e7:eb:21:32:f6:d2:94:dc:70:96:e6: b5:ed:5f:d3:f6:66:1b:8a:78:e4:7f:e3:9a:ad:29: dc:35:10:a4:5d:54:6f:99:57:58:f6:31:2a:2f:c5: 0e:51:d8:8e:62:e6:90:b6:1a:0a:c0:3f:05:27:3f: 32:cf:cd:60:90:88:10:42:f6:43:59:47:16:0d:74: 6f:60:06:91:f7:84:99:d4:c6:dc:72:20:71:42:0b: 2f:d4:ca:d1:f1:23:e9:1d:fd:7f:92:ae:a5:25:94: 1c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:78:C0:F1:5C:C2:BA:6E:11:DD:EE:70:90:EA:9C:3A:70:BA:7B:93 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31322e302f32332d3233203d3e203631393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.12.0/23 Signature Algorithm: sha256WithRSAEncryption 85:4e:19:19:5b:79:a3:66:78:ad:3e:07:b0:bc:0a:70:18:31: 74:05:6d:f4:b9:89:68:50:74:1b:a6:40:6f:c3:e4:7e:5a:6e: ff:1e:bd:55:74:57:7b:aa:f8:be:2a:cf:e6:f7:f1:43:3b:b7: 0d:4c:5d:54:1d:b9:7f:e1:98:6c:41:b4:c7:12:3d:ae:b8:4b: 11:ca:ce:43:3e:35:97:dc:6c:fc:b9:6d:cc:3a:15:c0:62:0f: a8:d9:c9:a9:b2:61:98:78:95:31:00:c7:70:31:fe:43:83:db: 32:4a:32:ae:ff:bd:7c:19:43:3e:bc:92:fd:82:e3:a2:e2:1b: 98:d2:5d:f8:53:21:b3:98:c7:a8:48:7e:4f:b6:a4:1d:16:0d: b4:4a:25:77:79:13:0f:dc:7c:47:58:2f:53:33:bb:c5:08:7b: fe:af:ef:d8:7e:06:04:d9:16:e0:4f:a2:a5:7f:26:4b:32:a1: 85:72:3b:dc:18:9b:76:d7:3b:16:d6:7e:73:44:3d:d6:8e:a3: 1b:8c:c4:34:18:fc:a7:e1:e9:17:6d:f4:88:7c:17:53:5f:e4: c6:e1:53:fe:57:87:be:db:d2:45:fd:f1:05:10:99:4d:9f:2d: bd:54:e5:1c:48:ed:22:14:17:e4:d9:ea:9b:a8:c6:db:d1:c0: 86:af:8f:03 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUKlVNiCJT/ZbS6T3lWfF2oBLDRHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTEyMDEwODE2MzNaFw0yNjExMzAwODIxMzNaMDMxMTAvBgNV BAMTKEZFNzhDMEYxNUNDMkJBNkUxMURERUU3MDkwRUE5QzNBNzBCQTdCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprXpVmlR57rKxRImlZq5DFlRX /YJ76ssKfcPJXjSbBWI1G99CqNvhgE2R4TTtCYADNDI3ngV249VRUI+wD5BBzsSF lj9Xl703D2KCMPJ4C/eJdBsMql3lL0QnYu843oIockvGhA7dacoCE2lXCSoVXvGb r44T/cpq/4q6ow8wOMGqCF/6VpJcfoiOBnRX2ODoYuX7KGx6Xxjn6yEy9tKU3HCW 5rXtX9P2ZhuKeOR/45qtKdw1EKRdVG+ZV1j2MSovxQ5R2I5i5pC2GgrAPwUnPzLP zWCQiBBC9kNZRxYNdG9gBpH3hJnUxtxyIHFCCy/UytHxI+kd/X+SrqUllBwlAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQU/njA8VzCum4R3e5wkOqcOnC6e5MwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8v cnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8xLzMxMzgzNTJlMzIzMDM0 MmUzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM5MzYzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAbnMDDANBgkqhkiG9w0BAQsFAAOCAQEAhU4ZGVt5o2Z4rT4HsLwKcBgxdAVt 9LmJaFB0G6ZAb8Pkflpu/x69VXRXe6r4virP5vfxQzu3DUxdVB25f+GYbEG0xxI9 rrhLEcrOQz41l9xs/LltzDoVwGIPqNnJqbJhmHiVMQDHcDH+Q4PbMkoyrv+9fBlD PryS/YLjouIbmNJd+FMhs5jHqEh+T7akHRYNtEold3kTD9x8R1gvUzO7xQh7/q/v 2H4GBNkW4E+ipX8mSzKhhXI73Bibdtc7FtZ+c0Q91o6jG4zENBj8p+HpF230iHwX U1/kxuFT/leHvtvSRf3xBRCZTZ8tvVTlHEjtIhQX5Nnqm6jG29HAhq+PAw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:33:56 2025 by rpki-client